Merlyn

The Rules Of spam Rule #0: spam is theft. :angry: Angel's Commentary: Spammers believe it's okay to steal a little bit from each person on the Internet at once. Rule #1: Spammers lie. Russel's Admonition: Always assume that there is a measurable chance that the entity you are dealing with is a spammer. Lexical Contradiction: Spammers will redefine any term in order to disguise their abuse of Internet resources. Sharp's Corollary: Spammers attempt to re-define "spamming" as that which they do not do. Finnell's Corollary: Spammers define "remove" as "validate." Rule #2: If a spammer seems to be telling the truth, see Rule #1. Crissman's Corollary: A spammer, when caught, blames his victims. Moore's Corollary: Spammer's lies are seldom questioned by mainstream media. Rule #3: Spammers are stupid. Krueger's Corollary: Spammer lies are really stupid. Pickett's Commentary: Spammer lies are boring. Russell's Corollary: Never underestimate the stupidity of spammers. Spinosa's Corollary: Spammers assume everybody is more stupid than themselves. Spammer's Standard of Discourse: Threats and intimidation trump facts and logic. James' Axioms of Spammers' Beliefs:Bandwidth is infinite. It possible for infinite messages to occupy the same box at the same time. The less value a message has, the more people want to see it. The more someone is offended, the more likely they are to buy. Reward is inversely proportional to the work done to earn it. Rule #4: The natural course of a spamming business is to go bankrupt. Rules-Keeper Shaffer's Refrain: Spammers routinely prove the Rules of spam are valid.

Looks like the e360 case against Spamhaus has been Vacated A vacated judgment is the result of the judgment of an appellate court which overturns, reverses, or sets aside the judgment of a lower court. A trial court also has the power, under certain circumstances (usually involving fraud or lack of jurisdiction over the parties to a case) to vacate its own judgments. Relief from judgment in the United States district courts is governed by Rule 60 of the Federal Rules of Civil Procedure. A vacated judgment makes the original judgment legally void. A vacated judgment frees the parties to re-litigate the issues subject to the vacated judgment. Indeed the Seventh Circuit noted that a vacated judgment "place the parties in the position of no trial having taken place at all." United States v. Williams, 904 F.2d 7, 8 (7th Cir. 1990). Congrats Spamhaus! Details: http://www.spamsuite.com/node/279 9th Circuit Opinion In the United States Court of Appeals For the Seventh Circuit ____________ Nos. 06-3779 & 06-4169 e360 INSIGHT, an Illinois Limited Liability Co., and DAVID LINHARDT, Plaintiffs-Appellees, v. THE SPAMHAUS PROJECT, a Company Limited by Guarantee and Organized Under the Laws of England also known as THE SPAMHAUS PROJECT, LIMITED, Defendant-Appellant.

Spamcop is the least of your worries. the IP in question is in over a dozen block liksts. for example http://psbl.surriel.com/evidence?ip=24.186...=Check+evidence

Good advice Will Examples of spam from this ip can be found here: http://psbl.surriel.com/evidence?ip=196.11...=Check+evidence

First of all you shouldn't be running a mail server on a dynamic IP no self respecting admin will accept it. from another blocklist you are on: IP Address 98.17.92.125 is currently listed in the CBL. It was detected at 2008-12-15 14:00 GMT (+/- 30 minutes), approximately 8 hours, 30 minutes ago. ATTENTION: At the time of detection, this IP was infected with, or NATting for a computer infected with a high volume spam sending trojan - it is participating or facilitating a botnet sending spam or spreading virus/spam trojans. ATTENTION: if you simply repeatedly remove this IP address from the CBL without correcting the problem, the CBL WILL eventually stop letting you delist it and you will have to contact us directly. You MUST patch your system and then fix/remove the trojan. Do this before delisting, or you're most likely to be listed again almost immediately.

I believe they can ask their question without advertising their site! :angry:

Sorry but I have seen your site and you deserve to be blocked.

My OE folder(s) add up to 9 gig. Maybe that's why it is starting to slow down!

You cannot buy a list of emails addresses that have confirmed receiving email from you! You are spamming people, please stop.

We put em in our blocklist and they didn't get the clue so they became firewall fodder and everything is fine now.

Now that's a duck!

Report em all

If it looks like a duck and sounds like a duck and waddles like a duck.......................

I never get any of the good ones!

Not all new is bad: A Superlative Scam and spam Site Registrar Over the past week, a number of the Internet's largest data carriers have ceased providing online connectivity to Atrivo (a.k.a. "Intercage"), an ISP that security experts say is home to a huge number of scammers and spammers. More: http://voices.washingtonpost.com/securityf...ml?nav=rss_blog

I agree this is crazy: 2008-09-08 08:52:13.817322 received spamtrap mail 2008-09-08 09:04:11.940236 received spamtrap mail 2008-09-08 09:15:51.569278 received spamtrap mail 2008-09-08 09:16:08.775215 received spamtrap mail 2008-09-08 09:16:25.318341 received spamtrap mail 2008-09-08 09:16:40.74319 received spamtrap mail 2008-09-08 10:50:41.822424 received spamtrap mail 2008-09-08 12:31:09.580645 received spamtrap mail 2008-09-08 12:31:12.060563 received spamtrap mail 2008-09-08 13:40:21.583813 received spamtrap mail 2008-09-08 13:41:24.466944 received spamtrap mail 2008-09-08 13:41:56.440247 received spamtrap mail 2008-09-08 13:42:20.753731 received spamtrap mail 2008-09-08 13:49:48.382312 received spamtrap mail 2008-09-08 13:50:16.155073 received spamtrap mail 2008-09-08 14:42:45.944994 received spamtrap mail 2008-09-08 15:18:54.604246 received spamtrap mail 2008-09-08 15:28:57.041855 received spamtrap mail 2008-09-08 16:10:37.553177 received spamtrap mail 2008-09-08 16:37:11.866141 received spamtrap mail 2008-09-08 17:00:48.732874 received spamtrap mail 2008-09-08 17:18:14.617509 received spamtrap mail 2008-09-09 11:36:32.990355 received spamtrap mail 2008-09-10 09:59:09.647348 received spamtrap mail 2008-09-10 15:03:20.329388 received spamtrap mail

If he pulled the plug Friday night wouldn't it show 0 for yesterday? Mail has also come from 204.16.178.122 but it is not in any BL's. If he is running a mail server them he should also fix his dns. Most mail admins would not accept email from these servers. Last spam received still from the 5th Here is the last week in review for 204.16.178.124 2008-09-01 15:38:15.52524 received spamtrap mail 2008-09-01 18:15:54.186226 received spamtrap mail 2008-09-01 20:48:16.248339 received spamtrap mail 2008-09-01 21:04:01.742892 received spamtrap mail 2008-09-01 21:04:07.572854 received spamtrap mail 2008-09-01 21:05:37.699292 received spamtrap mail 2008-09-02 11:35:17.362489 received spamtrap mail 2008-09-02 14:48:08.375806 received spamtrap mail 2008-09-03 11:24:56.563608 received spamtrap mail 2008-09-03 11:27:12.000281 received spamtrap mail 2008-09-03 11:27:21.907506 received spamtrap mail 2008-09-03 11:41:58.931235 received spamtrap mail 2008-09-03 12:08:12.200371 received spamtrap mail 2008-09-03 12:15:34.07963 received spamtrap mail 2008-09-03 12:22:29.255998 received spamtrap mail 2008-09-03 12:23:59.723826 received spamtrap mail 2008-09-03 12:34:19.93141 received spamtrap mail 2008-09-03 12:35:52.693068 received spamtrap mail 2008-09-03 13:21:57.253962 received spamtrap mail 2008-09-04 11:09:28.495876 received spamtrap mail 2008-09-04 11:10:15.998042 received spamtrap mail 2008-09-04 12:02:12.929902 received spamtrap mail 2008-09-04 12:59:31.365288 received spamtrap mail 2008-09-04 13:48:57.055168 received spamtrap mail 2008-09-04 14:57:34.360341 received spamtrap mail 2008-09-04 14:57:34.360941 received spamtrap mail 2008-09-04 14:57:39.029985 received spamtrap mail 2008-09-04 16:11:52.351746 received spamtrap mail 2008-09-04 16:30:18.198819 received spamtrap mail 2008-09-04 16:37:31.134993 received spamtrap mail 2008-09-04 16:55:58.026908 received spamtrap mail 2008-09-04 16:56:00.20581 received spamtrap mail 2008-09-05 09:59:53.59665 received spamtrap mail 2008-09-05 14:50:27.019203 received spamtrap mail 2008-09-05 15:35:26.432107 received spamtrap mail

Still getting phishing scams as of yesterday the 5th - 2008-09-05 15:35:26 Subject: Sun Trust Banks Regulation Update Alert

This machine is still spewing it's junk to the internet. I believe it's time for NetOps over at icore to be notified about this machine/ip.

Actually the last thing I want to see is my average reporting time. I do not understand why it is needed. Report the spam and forget it. Be happy as long as you report it.

The IP should be shut down until the machine is fixed. Also: It should not be running a mail server: SMTP - 25 220 bcplantjcb.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.211 ready at Fri, 22 Aug 2008 15:48:45 +0100 Example header of spam From Azmeer-rednazfa[at]1topme.co.kr Thu Aug 21 08:30:10 2008 Delivery-date: Thu, 21 Aug 2008 08:30:10 -0400 Received: from [80.46.110.1] (helo=80-46-110-1.static.dsl.as9105.com) by mail.victim.example with esmtp (Exim 4.63) (envelope-from <Azmeer-rednazfa[at]1topme.co.kr>) id 1KW9Io-0004i5-7x for victim[at]smtp.example; Thu, 21 Aug 2008 08:30:10 -0400 From: "Azmeer Luostarinen" <Azmeer-rednazfa[at]1topme.co.kr> To: victim[at]smtp.example Subject: Britney Spears Leaves Earth, Humanity Breathes Sigh of Relief

http://tatumweb.com/iptools.htm

Update: Fake-CNN spam mutates as attacks continue http://www.computerworld.com/action/articl...rc=news_ts_head

Most of the regulars will know this guy! Federal authorities are accusing a Seattle man of not only sending out millions of spam messages himself, but selling the software for others to do the same and stealing unique e-mail addresses and domain names to further his operation. Complete story here: http://seattlepi.nwsource.com:80/local/317795_soloway31.html

hehehehehe (savicom.net)- sounds like some good advice to me. Use another address.